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Amendments to the CInims; 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Lixting of Claimi^; 

Claim 1, (Original) A method of performing remote notification of records each having a 
respective record identifier, the method comprising: 

maintaining a record-user mapping v^hich associates with each of a plurality of 
record identifiers a respective one or more user nhmes; 

for each record upon which remote notification is to be perfonned 

a) obtaining the record*s record identifier's respective <Jne or more user names 
from the record-user mapping; 

b) for each user name in the record's record identifier'd respective one or more 

i 
I 

user names obtaining from a user name-addressable entity mapping a respective addressable 
entity and sending a notification of the record to iho addressable entity. 



Claim 2. (Original) A method according to claim 1 further comprising 
name-addressable entity mapping from each userjname to the respective 



maintaining the user 
addressable entity. 



Claim 3. (Original) A method according to claim 2 wherein the user namc-addrcssable entity 
mapping \$ a trusted mapping. j 

Claim 4. (Original) A method according to claim 1 adapted to perfcrm remote notification of 
records generated by a certificate management system, wherein obtaining from a user name- 
addressable entity mapping a respective addressable entity comprises obtaining a respective 



addressable entity fi-om a respective certificate stored in a repository o 
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Claim 5. (Original) A method according to claim 4 wherein the certificate management system 
comprises a PKJ (Public Key Infrastructure). 



Claim 6. (Original) A method according to claSm 4 farther compris 



maintaining the repository of published certificates in 
plurality of user names the respective certificate in which is identified 
entity. 



ng: 



which is stored for each o f a 
the respective addressable 



Claim 7. (Original) A method according to claim 1 wherein the addressable entity is an E-mail 
address. 

Claim 8. (Original) A method aocordii^g to claim 1 wherein each user name is a distinguished 
name in accordance with X.500. 

Claim 9. (Original) A method according to claim 4 wherein the repository of published 
certificates is maintained in accordance with tlie X.500 series of recommendations. 

Claim 10. (Original) A method according to claim 9 flnther comprising for each certificate 
storing the respective addressable entity in a certificate extension field of the certificate. 



Claim 1 1 . (Original) A method according to claim 10 wherein storing 
addressable entity in a certificate extension field of the certificate 
respective addressable enti^ in a subject alternative name extension, 



comprises 



the respective 
storing the 



Claim 12. (Currently Amended) A method alccording to claim 4 fiirther comprising 
obtaining a new set of records for processin g from tim e to tim e, and conducting steps a) and b) 
for each record in the new set of records. 

Claim 13. (Original) A method according to claim 1 1 further comprising storing record reading 
parameters which determine circumstances undeTj which the new set o frecords for processing is 
to be obtained, and obtaining the new set of recoiids for processing in accordance with the record 
reading parameters. I 



i 
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Claim 14. (Original) A method according to claim 1 further comprising protecting each 

1 

notification message by encryption and/or digita^ signature. 

Claim 1 5. (Original) A method according to claim 4 further comprising protecting each 
notification message by encryption and/or digital! sigxiature. 

Claim 1 6. (Original) A method according to cla!im 4 fiirther comprising verifying authenticity of 

i 

the respective certificate before sending the notification to the addressable entity obtained from 
the respective certificate. 

Claim 17. (Original) A method according to clajim 1 further comprising maintaining an 
identification of a language of choice for each user name, before sending a notification to an 

addressable entity obtained for a particular user rjame, determining the particular user name's 

i 

language of choice and including a translation ofjtext in the notification message into the 
language of choice. 

Claim 18. (Original) A method according to cl^m 1 further comprising: 

identifying at least one record ideijitifier for which target audit record processing is 
to be performed, the ta^et audit record processing comprising: 

for each record identifier tor which target audit record processing is to be 
performed reading from the associated record a target user name, obtaining from the user name- 
addressable entity mapping a respective addressable entity for the targpt user name and sending a 
notification of the record to the addressable entitjf. 

\ 

Claim 19. (Original) A method according to claim 4 further eomprising: 

! 

identifying at least one record identifier for which target record processing is to be 

i 
I 

performed, the target audit record processitig coniprising; 

i 
I 

for each record identifier for wliich target record processing is to be performed 



reading from tlie associated record a target user name, obtaining from 
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certificates a respective addressable entity for the target user name ana sending a notification of 
the record to the addressable entity. 

Claim 20. (Original) A method of performing remote notification of records each having a 
respective record identifier, the method comprisiiig: 

identifying at least one record identifier for which target record processing is to be 

i 

performed, the target audit record processing comprising: 

for each record identifier for whidi target record processing is to be performed 
reading from an associated record a target user name which identifies a user name which was a 
target of an operation which resulted in the recorcl, obtaining from a user name-addressable entity 
mapping a respective addressable entity for the target user name and Jending a notification oFthe 
record to the addressable entity. 

Claim 2 1 . (Original) A method according to claim 20 further comprising maintaining the user 
name-addressable entity mapping from each user! name to the respective addressable entity* 

Claim 22. (Original) A method accord mg to clalim 21 wherein the user name-addressable entity 
mapping is a trusted mapping. 

i 

Claim 23. (Original) A method according to claim 20 adapted to perfonn remote notification of 

records generated by a certificate management syistem, wherein obtaunng &om a user name- 

i 

addressable entity mapping a respective addressable entity comprises obtaining the respective 
addressable entity from a respective certificate stored in a repository of published certificates. 



Claim 24. (Original) A method according to claim 21 wherein the certificate management 
system comprises a PKl (Public Key Infrastructure), 

Claim 25. (Original) A method according to claim 23 further comprising: 



collecting a set of records generated by the certificate management system 



Claim 26. (Original) A method according to claim 23 further comprising: 
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she 



maintaijaing a repository of published certificates in which 
pixirality of user names a respective ceriilicate in|which is identified a 
entity. ! 



is stored for each of a 
respective addressable 



Claim 27. (Original) A method according to claiim 23 wherein the addressable entity is an £- 
mail address. 

Claim 28. (Original) A method according to claim 23 wherein each user name is a distmguished 
name in accordance with X.SOO. 

Claim 29. (Original) A method according to cl^im 23 wherein the repository of published 

certificates is maintained in accordance with the X.SOO series of recommendations and further 

j I 

comprising for each certificate storing the respective addressable entity in a certificate extension 
of the certificate. 

Claim 30. (Original) A method according to claiim 29 wherein storing the respective 

addressable entity in a certificate extension of the certificate comprises storing the respective 

t 

addressable entity in a subject alternative name eTctension, 



Claim 3 1 . (Currently Amended) A method according to claim 23 
obtaining a new set of records for processing fi-oijn tim e to tim e. 



further comprising 



Claim 32. (Original) A method according to claim 3 1 further comprising storing record reading 
parameters which determine circumstances under which the new set of records for processing is 
to be obtained, and obtaining the new set of records for processing in accordance with the record 
reading parameters. 

Claim 33. (Original) A method according to claim 20 further comprising protecting each 
notification message by enciyption and/or digitaljsignature. 

i 

Claim 34, (Original) A method according to claim 20 further comprising protecting each 



notification message by encryption and/or digital 



signature. 



PAGE 9/19 ' RCVD AT 7/19/2007 3:26:14 PM [Eastern Daylight Time] ' SVR:USPTO-EFXRF-3/21 ' DNIS:2738300 ' CSID:613232g440 * DURATION (mm-ss):05-36 



JUL-19-S007 15:27 FROM: 



6132328440 



TQ:USPTO 



Appl. "No, 09/730,547 



Claim 35. (Original) A method according to claiim 23 ftirther 
of the respective certificate before sending the notification to the 
from the respective certificate. 



compnsmg verifying authenticity 
addrbssable entity obtained 



Claim 36. (Original) A method according to claim 20 further comprising maintaining an 
iden till cation of a language of choice for each user name, before sending a notification to an 
addressable entity obtained for a particular user name, determining the particular user name's 
language of choice and including a translation ol'jtext in the notification message into the 
language of choice. j 

• j 

Claim 37. (Original) An apparatus comprising: j 

a record-user xnapping memory structure which associates for each of a plurality 
of record identifiers a respective one or more usejr names; 

a receiving interface for receivingja set of records to be processed for remote 
notification, each record having a respective recojrd identifier; 

a noufication interface adapted to [send messages to addressable entities; 

I 

a record processing entity adapted] to process the set of records by obtaining the 
record's record identifier's respective one or moi|c user names from the record-user mapping, and 
for each user name in the record's record identifier's respective one oi? more user names 
obtaining (rom a user name-addressable entity mapping a respective aldressable entity and 

sending a notification of the record to the addressable entity through the notification in terface. 

I 

Claim 38. (Original) An apparatus according tojclaim 37 in combination with the user name- 
addressable entity mapping firom each user nameito the respective addressable entity. 



Claim 39. (Original) An apparatus according tojclaim 37 adapted to 
of records generated by a certificate management! system, wherein the 
entity mapping is part of a repository of published certificates, and whierein 
entity is adapted to obtain the respective addressable entity from a res] 
the repository of published certificates. 



>erform remote notification 
user name-addressable 

the record processing 
ipeclive certificate stored in 
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Claim 40. (Original) An apparatus according to claim 39 wherein the certificate management 
system comprises a PKT (public key infrastructurb) 

Claim 41 . (Original) An apparatus according toj claim 39 in combinaftion with the rep05;itory of 
published certificates. 

Claim 42. (Original) An apparatus according loj claim 39 wherein the addressable entity is an E- 

mail address, and the notification interface is an E-mail message sendmg component, 

i 
I 

Claim 43. (Currently Amended) An apparatus according to claim 39 further comprising a 



configuration file adapted to store record reading parameters* wherein 
collect through the record receiving interface a new set of records for 

i 

time. ! 

Claim 44, (Original) An apparatus according to| claim 37 further cormprising 



the apparatus is adapted to 
processing from time to 



a target record memory structure 4dapted to contain an 



identification of at least 



one record identifier for which target record processing is to be performed; 

i 

wherein the record processing entity is further adapted to process each record 

j 

identifier for which target record name processing is to be performed by readmg fiom the 
associated record a target user name, obtaining &om the user name«aadressable entity mapping a 
respective addressable entity for the target user name and sending a notification of the record to 
the addressable entity. 

Claim 45. (Original) An apparatus according tojclaim 39 further comprising: 

a target record memory structure adapted to contain an identification of at least 
one record identifier for which target record processing is to be performed 



wherein the record processing entity is further adapted lo process each record 

I be performed by reading from the associated 
record a target user name, obtaining from the repository of published certificates a respective 



identifier for which target record processing is to 
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addressable entity for the target user name and sending a notification of the record to the 
addressable entity. 

Claim 46, (Original) An apparatus comprising: 

a receiving interface for receivingj a set of records to be processed for remote 
notification, each record having a respective record identifier; 

a notification interface adapted tolsend messages to addressable entities; 



a target record memory structure adapted to contain an 



identification of at least 



one record identifier for which target record procjessing is to be perfonmed; 

I 

a record processing entity adapted to process each record in the set of records 

i 

having a record identifier for which target record; name processing is to be performed by reading 
from the record a target user name, obtaining from a user naxne*addfe$sable entity mapping a 
respective addressable entity for the target user name and sending a notification of the record to 
the addressable entity. j 

Claim 47. (Original) An apparatus according toj claim 46 wherein the user-name addressable 
entity mapping comprises a repository of published certificates which 
name a respective addressable entity. 



Claim 48. (Original) An apparatus according tojclaim 47 in combinaition 
addressable entity mapping fi'om each user namejto the respective addressable 



Claim 49. (Original) An apparatus according tojclaim 47 adapted to perform remote notification 
of records generated by a certificate management system. 

Claim 50. (Original) An apparatus according tojclaim 49 wherein the certificate management 

system comprises a PKT (Public Key Infrastructure). 

I 

Claim 5 1 . (Original) An apparatus according to claim 47 wherein the addressable entity is an E- 
mail address, and the notification interface is an E-mail message sending component, 
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Claim 52. (Currently Amended) An apparatus according to claim 47 further comprising a 



configuration file adapted to store record reading parameters* wherein 
collect through the record receiving interface a nfew set of records for 
time in accordance with the record reading parameters. 



the apparatus is adapted to 
processing from tim e to 



Claim 53. (Original) A computer readable medium having instructioy»$ stored thereon for 

i 

claim L 



instructing a processing platform to implement ajmethod according to 



Claim 54. (Original) A computer readable medium having instructions 
instructing a processing platform to implement ajmethod according to 



Claim 55. (Original) A computer readable medium having instractions stored thereon for 



stored thereon for 
claim 4. 



mstructing a processing platform to implement a 



method according to 



claim 20. 



10 

! 
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